1. guides
prorm
  • prorm documentation
  • Known test gaps
  • Architecture
  • Core concepts
  • Database types & coverage
  • Getting started
  • Going further
  • compliance
    • Compliance
    • The security toolkit: `prorm audit`
    • Checklists by regulation
    • Declaring personal data
    • Evidence bundles
    • Evidence
    • Frameworks: `@Security`
    • Jurisdictions
    • Platform policies
    • Protecting data
    • The regulation dataset
    • Residency and cross-border transfers
    • Retention & integrity
    • Status
    • Subject rights
  • decorators
    • prorm with decorators
    • Models with decorators
    • Querying a decorated model
    • Relations with decorators
  • diagrams
    • Diagram generators
    • Chen diagram
    • Class diagram
    • Dependency diagram
    • ER diagram
    • Flow diagram
    • From your models to a diagram
    • Gantt diagram
    • Index diagram
    • Migration diagram
    • Model diagram
    • Package diagram
    • Crow’s-foot diagram
    • Schema documentation
    • Sequence diagram
    • State diagram
    • Tree diagram
  • dialects
    • SQL dialects
    • AlloyDB Dialect
    • AlloyDB Omni Dialect
    • Amazon Athena Dialect
    • Aurora DSQL Dialect
    • Amazon Aurora MySQL Dialect
    • Amazon Aurora PostgreSQL Dialect
    • Azure Database for MySQL Dialect
    • Azure Database for PostgreSQL Dialect
    • Azure SQL Database Dialect
    • Azure SQL Managed Instance Dialect
    • Google BigQuery Dialect
    • Citus Dialect
    • ClickHouse dialect
    • Cloud Authentication (`cloud-auth`)
    • Cloud SQL for SQL Server Dialect
    • Cloud SQL for MySQL Dialect
    • Cloud SQL for PostgreSQL Dialect
    • CockroachDB Dialect
    • Azure Cosmos DB for PostgreSQL Dialect
    • CrateDB Dialect
    • Cloudflare D1 Dialect
    • Databricks dialect
    • IBM Db2 Dialect
    • Dolt Dialect
    • Apache Doris Dialect
    • Druid Dialect
    • DuckDB Dialect
    • Exasol dialect
    • Microsoft Fabric Data Warehouse Dialect
    • Firebird Dialect
    • Greenplum Dialect
    • SAP HANA Dialect
    • MySQL HeatWave Dialect
    • Azure Data Explorer (Kusto) Dialect — T-SQL
    • MariaDB Dialect
    • Materialize Dialect
    • MonetDB Dialect
    • MotherDuck Dialect
    • Microsoft SQL Server Dialect
    • MySQL Dialect
    • Neon Dialect
    • OceanBase Dialect
    • openGauss Dialect
    • Oracle Dialect
    • Oracle Autonomous Database Dialect
    • ParadeDB Dialect
    • PolarDB Dialect
    • PostgreSQL Dialect
    • Presto Dialect
    • QuestDB Dialect
    • Aurora RDS Data API Dialect (`rdsdata`)
    • Amazon RDS for Db2 Dialect
    • Amazon RDS for MariaDB Dialect
    • Amazon RDS for SQL Server Dialect
    • Amazon RDS for MySQL Dialect
    • Amazon RDS for Oracle Dialect
    • Amazon RDS for PostgreSQL Dialect
    • Amazon Redshift
    • Amazon Redshift Data API Dialect
    • RisingWave Dialect
    • rqlite Dialect
    • SingleStore Dialect
    • Snowflake Dialect
    • Google Cloud Spanner Dialect
    • Spanner (PostgreSQL interface) Dialect
    • SQLite Dialect
    • StarRocks Dialect
    • Supabase Dialect
    • Azure Synapse Analytics (dedicated SQL pool)
    • Teradata Dialect
    • TiDB Dialect
    • TimescaleDB Dialect
    • Trino Dialect
    • Turso / libSQL Dialect
    • Vertica dialect
    • Vitess Dialect
    • Yellowbrick Dialect
    • YugabyteDB Dialect
  • guides
    • Access rules and behaviour profiles
    • ArangoDB (AQL)
    • Associations
    • Audit levels and escalation
    • Audit logging
    • In the browser
    • Bulk operations
    • Caching
    • Capabilities, tiers and team roles
    • CLI
    • Cloudflare
    • Compliance & data protection
    • Connection Pooling & Performance
    • Security in the console
    • Couchbase: structured N1QL queries
    • Data types
    • Decorators
    • Eager loading
    • Enums and constants
    • Error handling & error types
    • Extensions
    • External fields
    • Foreign data wrappers
    • Graph databases
    • Hooks & lifecycle events
    • Indexes & constraints
    • InfluxDB: structured Flux pipelines
    • klock-errors
    • klock — the `.klock` file
    • Local databases (`prorm db up`)
    • Structured log search — Splunk, Graylog, Papertrail, Sumo Logic
    • Logging
    • Grafana Loki: structured LogQL queries
    • MCP server
    • Migrate — the data transfer subsystem
    • Migrations & Schema Sync
    • Models from an existing database
    • Defining models
    • Multiple databases
    • OrientDB, Neptune and TigerGraph
    • Passwords
    • Importing a Prisma schema
    • Structured PromQL and MetricsQL
    • Query firewall
    • QueryInterface
    • Query operators reference
    • Query optimization
    • Composing find options with `pipe()` and `Q`
    • Query safety: the fail-closed WHERE guard
    • Querying
    • Raw Queries & Query Building
    • Read replicas
    • Schema diffing & migration generation
    • Views, triggers & other schema objects
    • Scopes & default scopes
    • Seeders
    • SPARQL / RDF triplestores
    • SQL constants
    • SQL features
    • SQL function builders
    • SQLite advanced features
    • StoreKey — a prod-orm database as the storage
    • Streaming results
    • Terraform
    • Transactions & Isolation Levels
    • Type mapping: legacy and modern
    • TypeScript types
    • Database users, roles & privileges
    • Validation & constraints
    • Virtual & Computed Fields
    • Writing docs
  • javascript
    • prorm in JavaScript
    • Models in JavaScript
    • Querying in JavaScript
    • Relations in JavaScript
  • runbooks
    • Operational runbooks
    • Connection failures
    • Credential rotation
    • Failover
    • Incident checklist
    • Deploying klock v2
    • Migration rollback
  • running-databases
    • Running databases in Docker
    • Running prorm under Bun in Docker
    • Running Cassandra in Docker with prorm
    • Running ClickHouse in Docker with prorm
    • Running CockroachDB in Docker with prorm
    • Running prorm under Deno in Docker
    • Running Elasticsearch in Docker with prorm
    • Running MariaDB in Docker with prorm
    • Running MongoDB in Docker with prorm
  • prorm control plane
    • Introduction
    • Authentication
    • Errors
    • Getting started
      • Service
        • Is it up
        • This description
    • Account
      • Sign-up and verification
        • Create an account
        • Exchange credentials for a token
        • Verify with the emailed code
        • Verify by clicking the emailed link
        • Name the parent or guardian
        • What a consent link is about
        • Give consent for a child's account
        • Ask the parent or guardian again
        • Send a new code and link
      • Family
        • Everyone this account is responsible for
        • One child, in detail
        • Turn a limit on or off
      • Profile
        • Who am I
        • Change the account
        • Every address on the account
        • Add an address
        • Confirm an address with the code mailed to it
        • Mail a fresh code to an unconfirmed address
        • Make an address primary
        • Remove an address
        • What this caller may do
    • Security
      • Sessions
        • Everywhere this account is signed in
        • Sign out everywhere else
        • Sign one out
        • A token for the CLI on a named machine
        • A token for the customer console, from the staff one
        • Park a sign-in for the CLI to collect
        • The CLI collecting its sign-in
        • The team's members' live sessions
        • Sign a member's session out
        • Sign an account out everywhere
        • Everywhere the account is signed in
        • Sign an account's session out
      • Single sign-on
        • Begin a single sign-on
        • The provider's return
        • Link the signed-in account to a team's provider
        • Which team an address signs in to
        • The team's single sign-on, as a member sees it
        • Set the team's OpenID Connect provider up, or change it
        • Remove the provider
        • The team's domain claims and the DNS record each needs
        • Prove a claimed domain
      • MFA and passwords
        • Start enrolling a second factor
        • Prove the app has it
        • Remove the second factor
        • Ask for a reset link
        • Set a new password with the emailed token
      • Klock
        • Open a device-bound klock session
        • Check in, for the next grant
        • Step up the session asking
        • Rotate the device key
        • Freeze a session
        • Unfreeze a session
        • A guest grant
        • The revocation feed
        • The published keyset
        • What this control plane supports
      • Devices
        • Your devices, or a team's
        • Approve a new device's pairing code
        • One device
        • Rename a device
        • Revoke a device
        • Suspend a device
        • Reinstate a suspended device
        • Wipe a device
        • Ask a device to rotate its key
        • The team's members' devices
        • Revoke a member's device
        • An account's devices
        • Revoke an account's device
        • Wipe an account's device
        • The device fleet
      • Access rules and behaviour
        • The access rules that bear on you
        • Add an access rule
        • This request, as the rules see it
        • One access rule
        • Remove an access rule
        • The behaviour profiles that bear on you
        • Add or change a behaviour profile
        • The profile presets
        • Your behaviour findings
        • Acknowledge a finding
        • One behaviour profile
        • Remove a behaviour profile
        • The team's access rules
        • Add a team access rule
        • Remove a team access rule
        • The team's behaviour profiles
        • Add or change a team behaviour profile
        • Remove a team behaviour profile
        • What the team's profiles caught
        • Acknowledge a team finding
      • Recovery and lockdown
        • Ask for a recovery link
        • Recover access with the emailed code
        • Is the account locked down
        • Lock the account down
        • Release a lockdown
        • Lock a member down
        • Release a member's lockdown
      • MCP tokens
        • Make a delegated token for one MCP client
        • The account's delegated tokens
        • Revoke a delegated token
        • What a delegated token may do now
        • Run one MCP tool with a delegated token
        • Run a device-signed MCP tool call relayed by the MCP Worker
      • Kerberos
        • Give the team its own Kerberos realm
        • The team's realm
        • Remove the team's realm
    • Logging and monitoring
      • Audit log
        • What has been done to the account
        • What has happened to this account
        • The account's audit trail
      • Operations
        • Everything that has been asked of this database
        • One, with its steps
        • Stop it
        • Put a failed one back in the queue
        • Every operation, across all accounts
      • Metrics and events
        • Every measurement, for a graph
        • Who did what to it
    • Billing
      • Plans and pricing
        • What the plans allow
        • The rate card
        • What one database would cost
        • What this account is paying for, itemised
      • Subscriptions and invoices
        • What this month's invoice will say
        • What this account is on
        • What it has been charged
        • Start a Stripe Checkout session
        • Open the customer portal
        • Stripe's events
        • Buy more connection pools
      • Team billing
        • The team's billing account
        • What the team has been charged
        • What this month's invoice will say
        • The team's cards
        • Add a card, through a Stripe-hosted setup session
        • Make a card the team's default
        • Remove a card
        • Start the team paying
        • Open the Stripe portal on the team's customer
        • Change the team's plan
        • Who receives the team's bills
        • How the team pays for transfers
    • Support
      • Support chat
        • My conversations
        • Start a conversation
        • Every support conversation, open first
        • A ticket for the socket
        • One conversation, with who is in it and who is connected
        • Rename a group; open or close a support conversation
        • The lines, oldest first
        • Say something
        • Add somebody
        • Mark read
    • Administration
      • Users
        • Every account
        • One account, with everything hanging off it
        • Grant or revoke admin
        • Verify an account by hand
        • Lock or unlock sign-in
        • Allow or hold provisioning
        • Send the verification mail again
        • Set the plan by hand
      • Platform
        • Every database and store, across all accounts
        • The counts worth putting on a dashboard
      • Staff and permissions
        • What kind of admin the caller is, and which scopes they hold
        • The admin presets
        • Every admin, and the scopes each resolves to
        • Make an account an admin of a kind
        • Change an admin's kind, or a custom admin's scopes
        • Revoke admin
      • Team administration
        • Every team, with its owner and size
        • One team in full — members with their accounts, and projects
        • Hand the team to another member
        • Put an account in the team, active at once
        • Change a member's role
        • Remove a member
      • Assumed identities
        • Assume an identity — act as a customer account
        • The identities the caller holds open
        • End an assumed identity
      • Support inbox
        • The platform's addresses
        • Add a platform address
        • One address, with its counts
        • Change an address's label, routing, or whether it accepts mail
        • Remove an address that holds no mail
        • Make, adopt or repair the address's routing rule
        • Every admin's personal address, made where missing
        • File a raw message, as if it had arrived
        • The inbox
        • One message, whole
        • Mark a message
        • Hand a message to an admin, or take it back
        • Leave an internal note
        • Reply, from the address the message came to
        • What is waiting
    • Databases
      • Databases
        • Data stores
          • Every data store on the account
          • Provision a data store
          • Change a data store that is already running
          • One data store
          • Deprovision it
          • Report what it is using
          • How to reach a data store
        • Connections and credentials
          • The api keys on a database
          • Issue a key
          • Revoke a key
          • The engine users we created
          • Create a user inside the database
          • Give a user a new password
          • Drop a user
          • How the database is reached
          • Set how it is reached
          • Revoke every api key on it
          • How to connect to it
          • The ssh keys that open its bastion
          • Add a key, or have one made
          • The private half of a generated key, once
          • Revoke an ssh key
        • Schema and objects
          • The SQL objects we put in it
          • Create one, and apply it
          • What is in the database, as the engine reports it
          • One table
          • What it would run, without running it
          • Redefine an object in place
          • Drop it
          • The extensions installed in it
        • Migrations
          • A plan compiled to statements, recording nothing
          • The migrations recorded for it
          • Record one
          • Apply everything recorded and not yet run
          • Apply everything pending, oldest version first
        • Lifecycle
          • Grow or shrink it
          • Stop it accepting connections
          • Start it again
          • Move it to another region
        • Backups and replicas
          • Take a backup
          • The backups it has
          • Restore one into it
          • What has been restored into it, and from where
          • Its read copies
          • Add one
        • Policies
          • The catalog
          • One policy
          • What this database is held to
          • Switch a policy on, or change its knobs
          • Switch it off
          • Mark the policies reviewed
          • Evaluate the periodic policies now
          • Who is behind a credential
        • Passwordless
          • The database's passwordless sessions
          • Issue a passwordless session (v1)
          • Revoke a passwordless session
          • Bind a session to a device key
          • Issue a v2 session for a host to bind
          • Redeem an enrolment ticket on the host
          • Check a passwordless credential
          • Run one described query under a passwordless credential
        • Database roles
          • The database's roles
          • Define a role
          • One role
          • Change what a role permits
          • Delete a role, and revoke every key granted it
          • Grant a role, which mints a key
          • Who holds a role
          • The api keys bound to a role
        • Pools
          • A database's connection pools, and how busy each is
          • Open another pool
          • Rename a pool or change its size
          • Close a pool
        • Data plane
          • Run a query against a database
          • Several statements, in order, over one connection
          • Is this database answering
          • What the proxy itself is holding
        • Transfers
          • The strategies this account's tier may use
          • Price a transfer without creating it
          • The account's transfer jobs, newest first
          • Create a transfer job
          • One job, and whether its certificate holds
          • Cancel an unfinished job
          • Start a created job, confirming its price
          • Report a job's status (the runner, or the owner's side of a local run)
        • Every database on the account
        • Provision a database
        • Change a database that is already running
        • One database
        • Deprovision it
        • Read or write it
        • Report what it is using
        • The engines this API will provision
        • Where a managed database can be put
    • Teams
      • Teams
        • Members
          • Who is on it
          • Invite somebody
          • Accept an invitation
          • Change somebody's role
          • Remove somebody
        • Projects
          • The projects a team runs
          • Start one
          • Rename a project, or move its environment
          • Delete a project
          • One project, and what is in it
          • Put a database or store in it
          • What is in a project
          • Take one out
        • The teams this account is on
        • Start one
        • The twelve roles, and what each may do
        • Rename a team
        • Close a team
        • One team
        • Hand the team to somebody else
        • Leave a team
    • Schemas
      • Error
      • ValidationErrors
      • Token
      • PolicyCategory
      • PolicySeverity
      • PolicyAction
      • PolicyTrigger
      • PolicyParam
      • Policy
      • PolicyCatalog
      • PolicyAssignment
      • PolicyOutcome
      • PolicyFiring
      • CredentialTrace
      • Relation
      • Restrictions
      • ChildSummary
      • SignupRequest
      • SigninRequest
      • UpdateMeRequest
      • User
      • Address
      • GeoPoint
      • D1Region
      • Usage
      • UsageReport
      • Resource
      • Database
      • DataStore
      • NewDatabase
      • NewDataStore
      • QueryRequest
      • DatabasePrivilege
      • ApiKey
      • DbUser
      • Access
      • AccessRequest
      • DatabaseObject
      • NewDatabaseObject
      • NewMigration
      • SchemaOperation
      • Migration
      • Operation
      • Session
      • AdminPowers
      • Admin
      • AuditEntry
      • TeamRole
      • Conversation
      • ChatMessage
      • TeamSso
      • Team
      • TeamMember
      • SshKey
      • ConnectionInfo
      • InboxAddress
      • InboxMailbox
      • InboxMessageSummary
      • InboxMessage
      • InboxNote
      • Page
      • Quote
      • Plan
      • ApiError
      • CapabilityRefusal
      • KlockErrorCode
      • PageWindow
      • SessionView
      • KlockStepUpRequest
      • KlockOpenRequest
      • KlockOpenedSession
      • UpdateMeResult
      • CapabilitiesView
      • SessionLimits
      • Device
      • DeviceListed
      • DeviceTeamRef
      • DeviceCommand
      • DeviceAuditLine
      • DeviceActionRequest
      • StaffActionRequest
      • ManagedSession
      • SessionRevoked
      • AccessRule
      • AccessRuleRequest
      • BehaviourProfile
      • BehaviourProfileRequest
      • BehaviourProfileSaved
      • BehaviourFinding
      • BehaviourFindingAck
      • StepUpProof
      • Removed
      • MemberLockdownRequest
      • McpClient
      • McpDelegatedView
      • McpToolCall
      • McpForwardRequest
      • PasswordlessScope
      • RoleScope
      • PasswordlessSession
      • PasswordlessTlsMaterial
      • PasswordlessKerberosMaterial
      • ServiceDeviceKeys
      • ServiceSession
      • DatabaseRole
      • TransferEndpoint
      • TransferJobRequest
      • TransferQuote
      • TransferStrategy
      • TransferJob
      • TransferJobAccess
      • Pool
      • PoolAllowance
      • BillingSubscription
      • Invoice
      • BillingContact
      • PaymentMethod
      • UpcomingCharges
      • TeamBilling
      • TeamKerberosRealm
      • TeamSsoDomain
      • TeamSsoResponse
      • StoreConnection
      • BatchFailure
      • ProxyStatus
  1. guides

Error handling & error types

Every error class prorm defines descends from a single base class, PrormError, which itself extends the native Error. The typed subclasses let you branch on the kind of failure (a dropped connection, a violated constraint, a locked table) instead of pattern-matching raw driver message strings. This guide covers the class hierarchy in src/errors, which errors reach you from where, how to catch and tell them apart, the properties each one carries, and the utility helpers for classifying, retrying, and formatting them.
[!IMPORTANT]
Most failures arrive already typed. Model validation throws
ValidationError, transaction misuse throws TransactionError, and the
…OrFail finders throw EmptyResultError. A statement the database
rejects for a unique, foreign-key or exclusion violation, a deadlock, a
statement timeout or a lock arrives as UniqueConstraintError,
ForeignKeyConstraintError, ExclusionConstraintError, DeadlockError,
TimeoutError or ResourceLockedError, with the driver error on .parent
and the statement on .sql. Anything else the database rejects (a syntax
error, a missing table) is re-thrown as the driver's own error; pass it
through wrapError() at your
boundary if you want a DatabaseError. Where each error comes from
has the captured details. Before 4.9.2, constraint violations also arrived
as plain errors.
Everything documented here is exported from the package root:
import {
  PrormError,
  DatabaseError,
  ValidationError,
  ConnectionError,
  UniqueConstraintError,
  ForeignKeyConstraintError,
  EmptyResultError,
  isPrormError,
  isValidationError,
  isRetryableError,
} from 'ts-prorm-orm';

The class hierarchy#

PrormError is the root. Most typed errors extend it directly; the constraint errors are the one place the tree goes deeper — UniqueConstraintError extends ValidationError (a unique violation is a kind of validation failure), while ForeignKeyConstraintError and ExclusionConstraintError extend PrormError directly.
TransactionError lives in src/transaction-support.ts rather than
src/errors, and several stores add their own DatabaseError subclasses
(DynamoDbError, DruidError, KustoError, the query-language
…CapabilityErrors), so an instanceof DatabaseError check covers them too.
Because everything descends from PrormError, a single instanceof PrormError check separates prorm-originated failures from unexpected bugs in your own code.

Error types#

ClassExtendsDefault codeNotable properties
PrormErrorErrorUNKNOWNcode, parent, sql, metadata
ConnectionErrorPrormErrorCONNECTION_ERRORdatabase, host
DatabaseErrorPrormErrorDATABASE_ERROR (QUERY_ERROR from wrapError)original
ValidationErrorPrormErrorVALIDATION_ERRORerrors[]
UniqueConstraintErrorValidationErrorUNIQUE_CONSTRAINT_ERRORfields[], errors[], parent, sql
ForeignKeyConstraintErrorPrormErrorFOREIGN_KEY_CONSTRAINT_ERRORfield, table, value
ExclusionConstraintErrorPrormErrorEXCLUSION_CONSTRAINT_ERRORconstraint
ConnectionAcquireTimeoutErrorConnectionErrorCONNECTION_TIMED_OUTtimeout (ms waited for a pooled connection)
TimeoutErrorPrormErrorTIMEOUT_ERRORtimeout
DeadlockErrorPrormErrorDEADLOCK_ERRORparent, sql
ResourceLockedErrorPrormErrorRESOURCE_LOCKED_ERRORresource
BulkRecordErrorPrormErrorBULK_RECORD_ERRORerrors[], errorCount
AssociationErrorPrormErrorASSOCIATION_ERRORassociation
EagerLoadErrorPrormErrorEAGER_LOAD_ERRORmodel, association, associationType
EmptyResultErrorPrormErrorUNKNOWNmodel, primaryKey, where
TransactionErrorPrormErrorUNKNOWNdialect

Common properties#

Every PrormError carries the same base set of fields, so any handler that catches the base type can rely on them:
import { PrormError } from 'ts-prorm-orm';

try {
  await user.save();
} catch (err: unknown) {
  if (err instanceof PrormError) {
    err.message;   // human-readable summary
    err.code;      // stable ErrorCode string, e.g. 'UNIQUE_CONSTRAINT_ERROR'
    err.parent;    // the original driver Error, if this was wrapped
    err.sql;       // the SQL statement that triggered it, when available
    err.metadata;  // per-type extra data (fields, host, timeout, ...)
    err.name;      // the subclass name, e.g. 'UniqueConstraintError'
  }
}
toJSON() is defined on the base class, so any prorm error serializes cleanly for structured logging:
console.log(JSON.stringify(err)); // { name, message, code, parent, sql, metadata, stack }

Where each error comes from#

Captured on SQLite against a table with owner VARCHAR(50) NOT NULL UNIQUE
(plus a len rule) and an email column with an isEmail rule, running each
call and printing what was caught, then what wrapError() made of it:
CallWhat is thrownAfter wrapError()
Account.create({}) (a NOT NULL column left out)ValidationError: owner cannot be nullunchanged
Account.create({ owner: 'x', email: 'nope' })ValidationError: Validation len on owner failed, Validation isEmail on email failedunchanged
Account.create({ owner: 'ada' }) a second timeUniqueConstraintError: Query error: SqliteError: UNIQUE constraint failed: accounts.owner, fields: ['owner'], code UNIQUE_CONSTRAINT_ERRORunchanged
Transfer.create({ fromId: 99, … }) (no account 99)ForeignKeyConstraintError: Query error: SqliteError: FOREIGN KEY constraint failedunchanged
prorm.query('SELEC 1')the driver's SqliteError: near "SELEC": syntax errorDatabaseError, code QUERY_ERROR
prorm.transaction(fn, { deferrable: true })TransactionError: sqlite has no DEFERRABLE transaction mode; drop `deferrable`.unchanged
Account.findByPkOrFail(42)EmptyResultError: Instance with Account and primary key 42 not foundunchanged
Validation runs in prorm before any SQL is sent, so those errors are typed
from the start and name the attribute on each item. A constraint the database
enforces is only discovered when the statement fails. Every dialect's
query() then classifies the failure by the driver's code (SQLSTATE,
errno, SQL Server error number, ORA- code), falling back to its message,
and throws the typed class with the driver's text as the message, the driver
error on .parent and the statement on .sql:
err.parent.message; // 'Query error: SqliteError: UNIQUE constraint failed: accounts.owner'
err.sql;            // `INSERT INTO "accounts" ("owner") VALUES ('ada')`
Nothing is emitted on the Prorm 'error' event for these. Other driver errors
(the SELEC 1 row) are re-thrown unchanged.

Catching and distinguishing errors#

Use instanceof to branch on error type. Classify first (a driver error that is not a constraint, deadlock, timeout or lock arrives untyped, see above), then check specific subclasses before falling back to the base type:
import {
  PrormError,
  ValidationError,
  ConnectionError,
  UniqueConstraintError,
  wrapError,
} from 'ts-prorm-orm';

try {
  await User.create({ email: 'taken@example.com' });
} catch (caught) {
  const err =
    caught instanceof PrormError || !(caught instanceof Error) ? caught : wrapError(caught);
  if (err instanceof UniqueConstraintError) {
    // a duplicate — most specific, so check it before ValidationError
    console.error('Already taken:', err.fields);
  } else if (err instanceof ValidationError) {
    // any other validation failure
    console.error('Invalid input:', err.getMessages());
  } else if (err instanceof ConnectionError) {
    console.error(`Cannot reach ${err.host}`);
  } else if (err instanceof PrormError) {
    console.error(`[${err.code}] ${err.message}`);
  } else {
    throw err; // not ours — re-throw
  }
}
Order matters: UniqueConstraintError extends ValidationError, so a ValidationError check placed first would swallow it.

Type guards#

For narrowing in TypeScript without remembering the hierarchy, prorm ships guard functions that both check the type and narrow it:
import {
  isPrormError,
  isValidationError,
  isConnectionError,
  isConstraintError,
  isEmptyResultError,
} from 'ts-prorm-orm';

if (isConstraintError(err)) {
  // err is UniqueConstraintError | ForeignKeyConstraintError | ExclusionConstraintError
}

if (isEmptyResultError(err)) {
  console.log(err.getMessage());
}

Matching by error code#

Every error carries a stable code from the ErrorCodes map. Codes are useful when you want to route on a specific condition without importing the class — for example distinguishing a refused connection from a timed-out one, both of which are ConnectionError:
import { ErrorCodes, isErrorCode } from 'ts-prorm-orm';

if (isErrorCode(err, ErrorCodes.CONNECTION_REFUSED)) {
  // service is down
} else if (isErrorCode(err, ErrorCodes.CONNECTION_TIMED_OUT)) {
  // slow — worth retrying
}

Handling validation errors#

ValidationError collects one or more ValidationErrorItem entries in its errors array. Each item records the message, type, and — when the failure is tied to a field — the path, value, and validator. Two helpers make the array easy to consume:
import { ValidationError } from 'ts-prorm-orm';

try {
  await user.validateRules();
} catch (err: unknown) {
  if (err instanceof ValidationError) {
    // Every message, flattened:
    err.getMessages(); // ['Email is required', 'Age must be positive']

    // Only the errors for one field:
    for (const item of err.getFieldErrors('email')) {
      console.log(item.message, item.value);
    }
  }
}
UniqueConstraintError is a specialization of ValidationError, so it exposes the same errors array plus a fields list naming the columns that collided:
if (err instanceof UniqueConstraintError) {
  console.error(`Duplicate value for: ${err.fields?.join(', ')}`);
}

Handling database & constraint errors#

Model calls and prorm.query() already throw the typed class for constraint
violations, deadlocks, timeouts and locks (see above). wrapError() is for
everything else you catch: it returns the most specific PrormError it can
identify, and anything unrecognized becomes a generic DatabaseError. The
original driver error is kept on .parent, and DatabaseError also keeps its
text on .original.
It decides in a fixed order, and the first match wins:
These are real messages run through wrapError() and isRetryableError():
Driver message (abridged)ClasscodeRetryable
duplicate key value violates unique constraint "users_email_key"UniqueConstraintErrorUNIQUE_CONSTRAINT_ERRORno
insert or update on table "orders" violates foreign key constraint "orders_userId_fkey"ForeignKeyConstraintErrorFOREIGN_KEY_CONSTRAINT_ERRORno
connect ECONNREFUSED 127.0.0.1:5432ConnectionErrorCONNECTION_REFUSEDno
canceling statement due to statement timeoutTimeoutErrorTIMEOUT_ERRORyes
Lock wait timeout exceeded; try restarting transactionTimeoutErrorTIMEOUT_ERRORyes
could not serialize access due to concurrent updateDatabaseErrorQUERY_ERRORno
Deadlock found when trying to get lock; try restarting transactionDeadlockErrorDEADLOCK_ERRORyes
database is lockedResourceLockedErrorRESOURCE_LOCKED_ERRORyes
[!NOTE]
Before 4.9.2, a message containing the word timeout was always a
ConnectionError (so a statement timeout read as a connection problem),
deadlocks were a non-retryable DatabaseError, and UniqueConstraintError
had code VALIDATION_ERROR and dropped .parent and .sql. Code that
switched on those codes needs updating. A serialization failure (40001)
is still a non-retryable DatabaseError: retrying it safely means
re-running the whole transaction, which is what
transaction(fn, { retry: { max } })
does.
import { DatabaseError, ForeignKeyConstraintError, PrormError, wrapError } from 'ts-prorm-orm';

try {
  await Order.create({ userId: 999 }); // no such user
} catch (caught) {
  // Leave errors prorm already typed alone; classify the rest.
  const err =
    caught instanceof PrormError || !(caught instanceof Error) ? caught : wrapError(caught);
  if (err instanceof ForeignKeyConstraintError) {
    console.error(`Bad reference on ${err.table}.${err.field} = ${err.value}`);
  } else if (err instanceof DatabaseError) {
    console.error('Query failed:', err.original);
    console.error('Offending SQL:', err.sql);
  }
}
You can also invoke the wrapper directly if you catch a raw driver error yourself:
import { wrapError } from 'ts-prorm-orm';

try {
  await rawDriver.query(sql);
} catch (raw) {
  throw wrapError(raw as Error, sql); // now a typed PrormError
}

Bulk operations#

BulkRecordError aggregates per-record failures from a batch operation. Each entry pairs the failing record's index, the record itself, and its error:
import { BulkRecordError } from 'ts-prorm-orm';

try {
  await User.bulkCreate(rows);
} catch (err) {
  if (err instanceof BulkRecordError) {
    console.error(`${err.errorCount} of ${rows.length} records failed`);
    for (const line of err.getMessages()) {
      console.error(line); // "Record 3: Email already exists"
    }
  }
}

Handling connection errors#

ConnectionError records the database and host it was trying to reach, and its code distinguishes the failure mode. The class provides static factories that set the right code for you — these are what the internal connection handling uses:
import { ConnectionError } from 'ts-prorm-orm';

throw ConnectionError.refused({ host: 'db.internal', database: 'app' });
throw ConnectionError.timedOut({ host: 'db.internal' });
throw ConnectionError.unreachable({ host: 'db.internal' });
throw ConnectionError.invalid({ database: 'app' });
At the catch site you usually only care whether to retry:
if (err instanceof ConnectionError) {
  console.error(`Failed to reach ${err.host} (${err.code})`);
}

Missing-result errors#

findByPk / findOne style lookups that expect a row but find none raise EmptyResultError, which remembers what was searched for. Its getMessage() builds a descriptive sentence from whichever of model, primaryKey, and where are set:
import { EmptyResultError } from 'ts-prorm-orm';

async function show(res: { status(code: number): { send(body: string): void } }) {
  try {
    return await User.findByPkOrFail(42);
  } catch (err: unknown) {
    if (err instanceof EmptyResultError) {
      // "Instance with User and primary key 42 not found"
      return res.status(404).send(err.getMessage());
    }
    throw err;
  }
}

Retrying transient failures#

Not every error is worth retrying. isRetryableError returns true only for the transient classes — every TimeoutError, ResourceLockedError and DeadlockError, plus ConnectionErrors whose code is CONNECTION_TIMED_OUT or HOST_NOT_REACHABLE (which includes ConnectionAcquireTimeoutError). A deadlock victim's whole transaction was rolled back, so retry the transaction, not the single statement. Constraint and validation failures are deterministic and are never retryable.
import { isRetryableError } from 'ts-prorm-orm';

async function withRetry<T>(op: () => Promise<T>, attempts = 3): Promise<T> {
  for (let i = 0; ; i++) {
    try {
      return await op();
    } catch (err) {
      if (i >= attempts - 1 || !isRetryableError(err)) throw err;
      await new Promise((r) => setTimeout(r, 100 * 2 ** i));
    }
  }
}

await withRetry(() => User.create({ email: 'a@b.com' }));

Logging & unwrapping helpers#

Two more utilities round out a handler. getRootCause unwraps the .parent chain to the original driver error, and formatError renders any error — including the nested validation items — into a multi-line log string.
import { getRootCause, formatError, wrapError, PrormError } from 'ts-prorm-orm';

try {
  await user.save();
} catch (err) {
  console.error(formatError(err instanceof Error && !(err instanceof PrormError) ? wrapError(err) : err));
  // [UniqueConstraintError] Query error: SqliteError: UNIQUE constraint failed: accounts.owner
  //   Code: UNIQUE_CONSTRAINT_ERROR
  //   SQL: INSERT INTO "accounts" ("owner") VALUES ('ada')
  //   Parent: Query error: SqliteError: UNIQUE constraint failed: accounts.owner
  //   Errors:
  //     - unknown: Query error: SqliteError: UNIQUE constraint failed: accounts.owner

  const root = err instanceof Error ? getRootCause(err) : err;
  reportToSentry(root);
}
The output above is captured from a duplicate insert on SQLite. The SQL:
and Parent: lines appear when the error carries them: every typed error a
model call or prorm.query() throws does, and wrapError(err, sql) adds the
SQL you pass. getRootCause() follows .parent to the driver's error.
A ValidationError from a model prints one line per attribute:
[ValidationError] Validation len on owner failed, Validation isEmail on email failed
  Code: VALIDATION_ERROR
  Errors:
    - owner: Validation len on owner failed
    - email: Validation isEmail on email failed

Counting failures without catching them#

Every statement emits a query event on the Prorm instance, and one that
failed carries error: true. That gives an error rate per model without
touching the call sites:
prorm.on('query', (event: { sql: string; duration: number; error?: boolean }) => {
  if (event.error) metrics.increment('db.query.errors');
});

Constructing validation errors#

When writing custom validators you can build errors with the same shape prorm uses internally. createValidationError makes a single-item error, and aggregateErrors merges several sources (existing ValidationErrors, item arrays, raw Errors, or strings) into one:
import { createValidationError, aggregateErrors } from 'ts-prorm-orm';

const err = createValidationError('Age must be positive', 'age', -3);

const combined = aggregateErrors(
  createValidationError('Email is required', 'email'),
  'Name too short',
);
combined.getMessages(); // ['Email is required', 'Name too short']

Putting it together: errors to HTTP responses#

An API usually wants one function that turns any failure into a status code
and a body the client can act on. Classify once, then map:
import {
  PrormError,
  ValidationError,
  UniqueConstraintError,
  ForeignKeyConstraintError,
  EmptyResultError,
  ConnectionError,
  TimeoutError,
  TransactionError,
  wrapError,
  isRetryableError,
  formatError,
} from 'ts-prorm-orm';

type HttpError = { status: number; body: Record<string, unknown>; headers?: Record<string, string> };

export function toHttpError(caught: unknown): HttpError {
  const err =
    caught instanceof PrormError || !(caught instanceof Error) ? caught : wrapError(caught);

  if (err instanceof UniqueConstraintError) {
    return { status: 409, body: { error: 'conflict', fields: err.fields ?? [] } };
  }
  if (err instanceof ValidationError) {
    const fields: Record<string, string[]> = {};
    for (const item of err.errors) {
      (fields[item.path ?? '_'] ??= []).push(item.message);
    }
    return { status: 422, body: { error: 'invalid', fields } };
  }
  if (err instanceof ForeignKeyConstraintError) {
    return { status: 422, body: { error: 'unknown_reference', field: err.field } };
  }
  if (err instanceof EmptyResultError) {
    return { status: 404, body: { error: 'not_found' } };
  }
  if (isRetryableError(err) || err instanceof ConnectionError || err instanceof TimeoutError) {
    return { status: 503, body: { error: 'unavailable' }, headers: { 'Retry-After': '2' } };
  }
  if (err instanceof TransactionError) {
    // A programming error: an option the engine cannot honour. Log loudly.
    console.error(formatError(err));
  }
  return { status: 500, body: { error: 'internal' } };
}
UniqueConstraintError is checked before ValidationError because it is one;
in the other order every duplicate would come back as a 422.

Summary#

Run a caught database error through wrapError() first: driver rejections arrive as plain errors. Then narrow to specific subclasses.
Check the deepest subclass first — UniqueConstraintError before ValidationError.
Read code for a stable, class-independent switch; read parent / sql / original for the underlying driver detail.
Use isRetryableError to decide what to retry, and formatError / getRootCause when logging.

Related reading#

Core concepts — the reading path these belong to
Going further — the specialised material
Modified at 2026-10-04 00:40:16
Previous
Enums and constants
Next
Extensions
Built with